CVE-2021-37040: Huawei Emui

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting.

Affected products

• Huawei Emui: version 11.0.0 only
• Huawei Harmonyos: before 2.0 (fixed in 2.0)
• Huawei Magic UI: version 4.0.0 only

Published 2021-12-08. Last modified 2026-06-17.